We're Cyber Essentials certified

On 12 November 2026, 63Digital became Cyber Essentials certified. The certificate covers the whole company and was awarded after an independent assessment. You can check the certificate yourself.

What Cyber Essentials is

Cyber Essentials is a UK Government-backed scheme, run by IASME for the National Cyber Security Centre. It checks that a business has the basic protections in place against the most common online attacks: the phishing emails, guessed passwords and out-of-date software behind most problems small businesses run into.

Many public-sector bodies and larger companies now ask their suppliers for it, because it's a simple, independent way to show the basics are covered.

The five things it checks

• Firewalls. Every device, and our network, sits behind a properly set up firewall.
• Secure settings. Default passwords are changed and software we don't use is removed.
• Access control. Each account has only the access it needs, and every cloud service we use needs multi-factor sign-in.
• Malware protection. Every device we work on is protected against malicious software.
• Security updates. Critical and high-risk fixes are applied within 14 days.

How it went

The assessment is a detailed questionnaire about every device, account and online service a business uses, marked by an independent assessor. We applied on 6 November and sent in our answers on 9 November. The assessor came back twice asking for more detail, and signed it off on 12 November.

The questions were useful in their own right. Writing down exactly which devices and services the business relies on, and who can get into each one, is worth doing whether or not you go for the certificate.

What it means for our clients

We build and look after the websites and software our clients run their businesses on, and some of that holds their customers' data. Doing that work means laptops, email, cloud services and logins to client systems. Cyber Essentials means the way we protect all of that has been checked by someone independent, rather than taken on trust.

If your own customers, or a tender, ask how your suppliers handle security, you can point to our certificate.

It isn't a guarantee, and no certificate can be. It shows the basics were in place when we were assessed, and we renew it every year.

Should your business get it?

If you bid for public-sector or larger contracts, or you hold customer data, it's worth a look. It's an online questionnaire, independently marked, and renewed every year. IASME's website explains how it works and how to find a certification body to assess you.